Data Deletion Policy - Splitr App

Last Updated: [June 24, 2025]

This page explains how you, a user of the Splitr app (also referred to as "the app"), can request the deletion of your account and associated data. We believe in your right to control your personal information.

How to Request Account and Data Deletion

You can request the permanent deletion of your account directly from within the app by following these steps:

1. Open the Splitr app and log in to your account.
2. Navigate to the Home Page the main screen showing your list of trips).
3. Tap on the Settings icon (gear icon) in the top-right corner.
4. On the Settings screen, tap on the "Delete My Account" option.
5. A confirmation dialog will appear explaining that this action is permanent. To proceed, you must type "DELETE" into the text field.
6. Tap the "Confirm Deletion" button.

Upon successful confirmation, your account will be scheduled for deletion, and you will be immediately logged out of the app.

Types of Data Deleted

When you request an account deletion, our automated system will begin a process to permanently remove the following data associated with your user ID:

• Your Account Credentials: Your user profile in our Firebase Authentication system, including your email and hashed password, will be permanently deleted.
• Your User Profile Data: Your document in our users collection, which contains your email, user ID, and Firebase Cloud Messaging (FCM) token for push notifications, will be deleted.
• Trips You Created (as Admin): Any trips where you are the designated "Admin" will be fully deleted. This includes all associated data for that trip, such as:
  • All expenses logged for the trip.
  • All chat messages in the trip's timeline.
  • All member information and join requests for that trip.
  • All attached receipt images stored in Firebase Storage for that trip.
• Your Membership in Other Trips: Your membership record will be removed from any trips you have joined that were created by other users.
• Your Pending Join Requests: Any outstanding requests you made to join other trips will be canceled and deleted.

Data That May Be Retained

Our goal is to delete all of your personal data. However, some data may persist in a non-identifiable or essential form:

• Data in Other Users' Trips: If you added an expense to a trip where you were not the admin, that expense record will remain as part of that trip's history, but it will no longer be directly linked to your deleted account. Similarly, chat messages you sent will remain in that trip's timeline but will be attributed to a "Deleted User".
• Server Logs: Like most online services, our servers may retain anonymized or aggregated logs for security and debugging purposes. These logs are not associated with personal identifiers and are automatically rotated and deleted on a short-term basis (e.g., 30-90 days).

Data Retention Period

Once you confirm your deletion request, the process begins immediately.

• Your primary account and profile data in Firebase Authentication and Firestore are deleted within 24-48 hours.
• Associated data, such as trips you administered and their sub-collections (expenses, chat, etc.), are also targeted for deletion within this timeframe.
• Data may persist in our automated backup systems for an additional period (e.g., up to 30 days) before being fully and irretrievably purged. This is a standard practice to ensure service reliability and disaster recovery.

If you have any questions about this policy, please contact us at:
splitr@unio.lk